NT Domain/2K Pro client problem...

[mcseguy9]

I know someone who runs an NT 4 domain in an interesting setup. He has one NT 4 PDC that is only used for file/print sharing and login validation. He only has two user's setup on the PDC. This setup is used in a college environment (very small school). He has all of the students use the same login ID, either userA or userB. Both user accounts are only in the Domain Users group on the PDC. Neither user account is in any group on the local 2K Pro PC's. When a student logs into one of these PC's as userA or userB they should only have the permissions assigned from the PDC, which should be whatever the Domain Users can do.

Well, this guy bought some new PC's with 2K Pro already loaded on them, set them up out of the box as-is, connected them to the domain, logged in as userA and userB and found that both user's can browse the other user's folders on the local PC. So userA can browse userB's profile folder and subfolders and userB can browse userA's profile folder and subfolders. He has double checked and made sure that userA and userB are not in the local admin groups and that they only group to which they belong in the domain is Domain Users.

Any ideas on what might be causing this?

[rraehal]

Look at the computer's file system. It C was formatted as FAT32 then there are no security permissons for file control. He would need to format the computers and reinstall Windows on an NTFS volume.

[mcseguy9]

rraehal, you are brilliant. I hadn't even thought of that. I believe that is the file format that most OEM PC's come in. I'll check on that and let you know.

[rraehal]

When we order our system from Dell, we have the option to specify FAT32 or NTFS for a file system. We always make sure to pick NTFS for this reason.